BEGIN:VCALENDAR VERSION:2.0 PRODID:Data::ICal 0.24 BEGIN:VEVENT DESCRIPTION: 'Title: Exploiting insecure OTA updates to create the worlds first\n Toothbrush Botnet and selfreplicating ESP32 worm\n When: Frid ay\, Aug 9\, 12:30 - 13:25 PDT\n Where: LVCC West/Floor 1/Hall 3/HW3-05- 03 - [1]Map\n\n Description:\n\n This presentation follows the journey of investigating\,\n conceptualizing\, and implementing a Wormable Botn et for the Evowera\n Planck Mini Smart Manual Toothbrush\, as fear-monge red by the team at\n Fortinet. We'll start with a high level overview of how the ESP32 OTA\n process works\, as well as cover issues with the re ference\n implementation released by Espressif. We'll then pivot to spec ifically\n attacking the Evowera Planck mini\, dumping the firmware and doing some\n lite RE\, monitoring the devices wireless traffic\, theoriz ing exploits\n and fuzzing undocumented PCB\, writing botnet software\, as well as what\n is involved in getting an ESP32 to serve the firmware it is running as\n an OTA update to other Evowera Planck Minis. We'll th en conclude with\n some proof that the devices do function as a botnet\, complete with a\n stealthy github based C2.\n\n SpeakerBio: Lozaning \n\n Lozaning (they/them) has been wardriving for over 10 years and enjo ys\n designing\, building\, and assembling unorthodox network observatio n\n platforms such as: The Wifydra \, The International Wigle Space\n Balloon\, and turning an Amtrak roomette into a mobile radio\n observati on lab. Currently ranked as the 63rd best wardriver in the\n world on Wi gle.net\, Lozaning loves all things wifi and high precision\n GNSS relat ed\, and is starting to maybe figure out BLE.\n\n '\n\n 1. #LVCCW_Leve l1_Hall3\n\n\n DTEND:20240809T202500Z DTSTART:20240809T193000Z LOCATION:RFV - LVCC West/Floor 1/Hall 3/HW3-05-03 SUMMARY:Exploiting insecure OTA updates to create the worlds first Toothbru sh Botnet and selfreplicating ESP32 worm END:VEVENT END:VCALENDAR